Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/bEU8CR9sDKSwKxxMoXu2XR3haJU.mft
File:                     bEU8CR9sDKSwKxxMoXu2XR3haJU.mft (raw, json)
Hash identifier:          QskNkQSrLJ/6nAmAI2zdLttQUKUq47m7Yd7dIOhGq9A=
Subject key identifier:   52:48:30:B6:CB:8B:D4:15:99:BE:51:3C:74:BB:AF:97:FF:83:26:79
Authority key identifier: 6C:45:3C:09:1F:6C:0C:A4:B0:2B:1C:4C:A1:7B:B6:5D:1D:E1:68:95
Certificate issuer:       /CN=6c453c091f6c0ca4b02b1c4ca17bb65d1de16895
Certificate serial:       01962F3D8451D24A91A0CF17D1284364AA53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bEU8CR9sDKSwKxxMoXu2XR3haJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/bEU8CR9sDKSwKxxMoXu2XR3haJU.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 13:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:22 +0000
Files and hashes:         1: NQq8etUndTjVgxrhy44nBmqGCOM.roa (hash: j7zhzvWt94q6NzpdciEQjpp4LDZ9qKJXwX2H3/CEMus=)
                          2: bEU8CR9sDKSwKxxMoXu2XR3haJU.crl (hash: zGfSCy31sOTPDftuAUKCQXAajWoCRRWluHNX7fWXv60=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:84:51:d2:4a:91:a0:cf:17:d1:28:43:64:aa:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c453c091f6c0ca4b02b1c4ca17bb65d1de16895
        Validity
            Not Before: Apr 13 13:01:22 2025 GMT
            Not After : Apr 14 13:01:22 2025 GMT
        Subject: CN=524830b6cb8bd41599be513c74bbaf97ff832679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f8:a9:38:69:d6:88:72:6e:00:87:8c:91:a9:
                    42:1b:53:e7:34:f1:72:a2:b9:65:0f:b0:a7:bb:a9:
                    a4:16:da:b7:82:33:83:82:0e:04:99:b0:e9:c1:65:
                    ae:3a:7d:f6:96:21:cc:2f:a8:5b:5e:82:f4:15:62:
                    08:b1:73:6d:be:90:19:63:3e:ec:86:78:67:6c:05:
                    87:2f:2f:ec:92:57:65:44:7d:fb:8e:19:e4:18:1a:
                    4a:d4:52:1d:bd:65:82:07:96:f3:65:87:72:55:1f:
                    d1:dc:7a:a9:6e:8d:c2:f2:5a:cd:ac:f5:1e:5a:eb:
                    6f:f6:06:2d:f6:c3:11:f8:3d:b5:14:51:a1:59:08:
                    98:34:0e:6d:e8:2f:6b:d6:6f:5c:2a:4a:cf:6f:7d:
                    57:b8:5d:83:22:6d:22:d7:23:16:95:ad:34:f1:17:
                    2e:9b:2e:92:cf:c3:f0:cc:07:5f:8d:6a:9b:43:e3:
                    61:08:a0:fd:90:58:2b:47:7c:c9:99:e2:b2:fb:34:
                    26:02:88:1b:68:07:da:7c:9b:8f:1f:9e:47:7a:4b:
                    1e:f3:fe:5a:a5:1b:75:15:6d:36:39:01:e5:8a:2d:
                    e4:13:c6:66:ef:cb:f1:fa:f7:6a:2b:ae:40:43:2f:
                    f2:26:03:d8:5d:ea:ed:00:39:e4:86:6f:5f:9c:bc:
                    c2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:48:30:B6:CB:8B:D4:15:99:BE:51:3C:74:BB:AF:97:FF:83:26:79
            X509v3 Authority Key Identifier:
                keyid:6C:45:3C:09:1F:6C:0C:A4:B0:2B:1C:4C:A1:7B:B6:5D:1D:E1:68:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEU8CR9sDKSwKxxMoXu2XR3haJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/bEU8CR9sDKSwKxxMoXu2XR3haJU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/bEU8CR9sDKSwKxxMoXu2XR3haJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:63:bf:a4:34:21:f1:57:3f:08:e9:05:41:a9:1a:6c:95:72:
         c3:b1:bc:e9:61:98:61:f9:c3:d0:22:31:b7:23:92:d7:54:06:
         34:81:1f:aa:84:a7:23:32:ed:d8:1c:65:ec:c1:39:f9:3a:e5:
         74:4a:0b:2d:59:f5:bc:9c:4d:b5:4c:14:66:96:0e:3d:7d:fd:
         03:e7:b8:bd:d1:aa:fd:2f:63:0d:c2:7d:da:23:14:af:91:86:
         3d:54:8b:5c:88:fc:53:d3:3c:23:5e:62:a6:47:0d:e2:a5:88:
         cd:ee:85:29:4b:01:96:64:97:bd:d6:d8:02:37:4f:5d:5d:65:
         57:2a:11:89:2e:76:f2:0e:1f:e1:23:a6:46:93:df:f7:cd:93:
         29:c5:4c:2c:39:c3:f5:96:fd:80:d1:f5:bb:d0:9f:f4:45:cf:
         83:89:13:2d:12:61:b0:b8:4a:7f:eb:b5:2c:96:00:ed:bc:1b:
         1a:20:d9:cf:62:d5:14:58:c5:53:4a:6d:0a:28:8f:be:23:b5:
         7f:a6:5b:82:f1:25:fe:ea:62:79:7c:1d:23:87:01:89:55:db:
         f4:b0:b9:2d:43:66:46:71:1d:45:ec:c3:af:ad:3a:6a:50:e4:
         07:e0:cb:1d:90:bd:8b:51:66:7b:6c:01:d3:4e:5d:bd:e2:a9:
         22:b7:66:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----